Hardcoded PASSWORDS in 2025? 🤯

Key Takeaways

HPE warns of hard-coded passwords in Aruba access points. Really sad to see that this is still happening in 2025. This was reported by Bleeping Computer on July 20th. Earlier this month, July the second, we had Cisco warning that Unified Communications Manager having hard-coded root SSH credentials. HPE has warned of hard-coded credentials in their Aruba instant access points. As an example, here are some of them. They should surely not be using hard-coded passwords. This is CVE 202537103. Hard-coded login credentials were found in these instant access points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access. There is no workaround for the CVE. The only option is to upgrade the software on the access points.